Epson WorkForce Enterprise WF-C17590 Operating instructions

Administrator's Guide

3

Contents

Administrator's Guide................................................................................................................................. 7

Using Web Config Network Configuration Software ................................................................................ 8

About Web Config ................................................................................................................................ 8

Accessing Web Config ......................................................................................................................... 8

Restricting Features Available for Users .............................................................................................. 9

User Feature Restriction................................................................................................................ 10

Configuring User Feature Restrictions........................................................................................... 10

Changing the Administrator Password in Web Config ................................................................... 12

Using Your Product on a Secure Network .......................................................................................... 13

Configuring SSL/TLS Communication........................................................................................... 13

Configuring SSL/TLS Settings .................................................................................................. 13

Configuring a Server Certificate for the Product........................................................................ 14

Configuring IPsec/IP Filtering ........................................................................................................ 15

About IPsec/IP Filtering ............................................................................................................ 16

Configuring Default IPsec/IP Filtering Policy............................................................................. 16

Configuring Group IPsec/IP Filtering Policies ........................................................................... 17

IPsec/IP Filtering Policy Settings .............................................................................................. 18

IPsec/IP Filtering Configuration Examples................................................................................ 23

Configuring an IPsec/IP Filtering Certificate ............................................................................. 24

Configuring SNMPv3 Protocol Settings......................................................................................... 25

SNMPv3 Settings...................................................................................................................... 26

Connecting the Product to an IEEE 802.1X Network..................................................................... 27

Configuring an IEEE 802.1X Network ....................................................................................... 27

IEEE 802.1X Network Settings ................................................................................................. 28

Configuring a Certificate for an IEEE 802.1X Network .............................................................. 29

IEEE 802.1X Network Status .................................................................................................... 30

Using a Digital Certificate .............................................................................................................. 31

About Digital Certification.......................................................................................................... 31

Obtaining and Importing a CA-signed Certificate ...................................................................... 32

CSR Setup Settings .................................................................................................................. 34

4

CSR Import Settings ................................................................................................................. 34

Deleting a CA-signed Certificate............................................................................................... 35

Updating a Self-signed Certificate............................................................................................. 35

Using an LDAP Server................................................................................................................... 36

Configuring the LDAP Server and Selecting Search Settings ................................................... 37

LDAP Server Settings ............................................................................................................... 38

LDAP Search Settings .............................................................................................................. 39

Checking the LDAP Server Connection .................................................................................... 40

LDAP Connection Report Messages ........................................................................................ 40

Configuring Protocols in Web Config............................................................................................. 41

Protocol Settings....................................................................................................................... 42

Using an Email Server ................................................................................................................... 46

Configuring an Email Server ..................................................................................................... 46

Email Server Settings ............................................................................................................... 47

Checking the Email Server Connection .................................................................................... 47

Email Server Connection Report Messages ............................................................................. 48

Configuring Email Notification................................................................................................... 50

Using EpsonNet Config Network Configuration Software..................................................................... 52

Installing EpsonNet Config ................................................................................................................. 52

Configuring a Product IP Address Using EpsonNet Config ................................................................ 52

Using Epson Device Admin Configuration Software ............................................................................. 54

Solving Problems ...................................................................................................................................... 55

Solving Network Software Usage Problems....................................................................................... 55

Cannot Access Web Config........................................................................................................... 55

The "Out of Date" Message Appears............................................................................................. 56

"The name of the security certificate does not match" Message Appears ..................................... 56

Model Name or IP Address Not Displayed in EpsonNet Config..................................................... 56

Solving Network Security Problems ................................................................................................... 56

Pre-Shared Key was Forgotten ..................................................................................................... 57

Cannot Communicate with the Product Using IPsec Communication ........................................... 57

Communication was Working, but Stopped................................................................................... 57

Cannot Create the Secure IPP Printing Port.................................................................................. 58

Cannot Connect After Configuring IPsec/IP Filtering..................................................................... 58

5

Cannot Access the Product After Configuring IEEE 802.1X .......................................................... 58

Solving Digital Certificate Problems ................................................................................................... 58

Digital Certificate Warning Messages............................................................................................ 58

Cannot Import a Digital Certificate................................................................................................. 60

Cannot Update a Certificate or Create a CSR ............................................................................... 60

Deleted a CA-signed Certificate .................................................................................................... 61

Where to Get Help.............................................................................................................................. 61

Notices ....................................................................................................................................................... 62

Trademarks........................................................................................................................................ 62

Copyright Notice................................................................................................................................. 62

Copyright Attribution ...................................................................................................................... 63

7

Administrator's Guide

Welcome to the Administrator's Guide.

For a printable PDF copy of this guide, click here.

Note: Not all features mentioned in this Administrator's Guide are available with every product model.

You can use two software utilities to configure your product's advanced network settings: Web Config

and EpsonNet Config. This guide covers Web Config in detail; for information on using EpsonNet Config,

see the EpsonNet Config help utility.

The available network functions vary by product. (Unavailable functions are not displayed on the

product’s control panel or software settings screen.) Epson products support the following system

administration functions:

• SSL/TLS communication: use Secure Sockets Layer/Transport Layer Security to encrypt traffic and

avoid spoofing between the product and a computer

• IPsec/IP filtering: control access and secure communications between the product and a network

gateway

• Individual protocol control: enable and disable single services

• Remote configuration of scan and fax destinations: use an LDAP server to look up fax and email

contacts

• User feature restriction: allow or deny access to printing, scanning, faxing, and copying on a per user

basis

• Import and export printer settings: migrate settings from product to product

8

Using Web Config Network Configuration Software

Follow the instructions in these sections to configure your product's administrator network settings using

the Web Config software.

Note: Before you can configure system administration settings, connect the product to a network. See

the product's User's Guide for instructions.

About Web Config

Accessing Web Config

Restricting Features Available for Users

Using Your Product on a Secure Network

About Web Config

Web Config is a browser-based application you can use to configure a product's settings. Basic and

advanced setting pages are available.

Note: Before you can configure system administration settings, connect the product to a network. See

the product's User's Guide for instructions.

You can lock the settings you select by setting up an administrator password for your product. See the

product's User's Guide for instructions.

Parent topic: Using Web Config Network Configuration Software

Accessing Web Config

You can access Web Config from your browser using HTTP or HTTPS.

By default, you access Web Config for the first time using HTTP. If you continue to use HTTP, Web

Config will not display all available menus.

1. Print a network status sheet for your product and identify the product IP address. See the product's

User's Guide for instructions.

2. Start your web browser and make sure JavaScript is enabled.

3. Type the product IP address into the browser as follows, depending on the protocol you are using:

• IPv4: http://product IP address

9

• IPv6: http://[product IP address]/

The Status page appears:

4. To use HTTPS, configure your browser to use HTTPS for the address.

A message warning about the self-signed certificate appears.

To access Web Config after configuring HTTPS, enter https:// before the product IP address, shown in

step 3.

Note: If the product name is registered with the DNS server, you can use the product name instead of

the product IP address to access Web Config.

Parent topic: Using Web Config Network Configuration Software

Restricting Features Available for Users

Follow the instructions in these sections to restrict users from using certain product features and create

an administrator password to lock the restrictions using the Web Config software.

User Feature Restriction

Configuring User Feature Restrictions

Changing the Administrator Password in Web Config

Parent topic: Using Web Config Network Configuration Software

10

User Feature Restriction

You can restrict available product features for up to 10 individual users, with different features available

to each user. This requires users to log into the product control panel with their user name and password

before they can use control panel features.

With Windows, you can also restrict printing and scanning from the product software. This requires users

to log into the printing or scanning software, and allows the software to authenticate the users before

printing or scanning proceeds. For instructions on setting up software restrictions, see the help utility in

the printing or scanning software.

Parent topic: Restricting Features Available for Users

Configuring User Feature Restrictions

You can create up to 10 user accounts and restrict access to control panel features separately for each

one.

1. Access Web Config and select the Product Security tab.

You see a window like this:

2. Select the Enables Access Controls checkbox.

11

3. If you have configured the product for an LDAP server or IEEE 802.1x network, you can deselect the

Allows printing and scanning without authentication information checkbox to prevent the

product from receiving jobs sent from these sources:

• The default operating system driver

• A PCL or PostScript printer driver

• Web services such as Epson Connect or Google Cloud Print

• Smartphones and other mobile devices

4. Click OK.

5. Select User Settings.

6. Click Add.

You see a window like this:

7. Enter a name for a user in the User Name field following the guidelines on the screen. Use ASCII

(0x20-0x7E) characters.

8. Enter a password for the user in the Password field following the guidelines on the screen.

Note: If you need to reset a password, leave the password field blank.

9. Select the checkbox for each function you want the user to be able to perform, and deselect the

checkbox for each function you want to restrict access to.

12

10. Click Apply.

Note: When you edit a completed user account, you see a Delete option. Click it to delete a user, if

necessary.

Note: You can import and export a list of user features using EpsonNet Config. See the help utility in the

software for instructions.

Parent topic: Restricting Features Available for Users

Changing the Administrator Password in Web Config

You can set an administrator password using your product's control panel, Web Config, or EpsonNet

Config. You use the same administrator password in all cases.

Note: See your product's User's Guide for instructions on setting an administrator password using the

control panel. If you forget your administrator password, contact Epson for support, as described in the

product's User's Guide.

1. Access Web Config and select the Product Security tab.

2. Select Change Administrator Password.

You see a window like this:

13

3. Do one of the following:

• If you have set an administrator password before, enter the current password, then enter and

confirm the new password in the fields provided.

• If you have not set an administrator password before, enter a new password and confirm it in the

fields provided.

4. Click OK.

Parent topic: Restricting Features Available for Users

Using Your Product on a Secure Network

Follow the instructions in these sections to configure security features for your product on the network

using the Web Config software.

Configuring SSL/TLS Communication

Configuring IPsec/IP Filtering

Configuring SNMPv3 Protocol Settings

Connecting the Product to an IEEE 802.1X Network

Using a Digital Certificate

Using an LDAP Server

Configuring Protocols in Web Config

Using an Email Server

Parent topic: Using Web Config Network Configuration Software

Configuring SSL/TLS Communication

Follow the instructions in these sections to configure SSL/TLS communication using Web Config.

Configuring SSL/TLS Settings

Configuring a Server Certificate for the Product

Parent topic: Using Your Product on a Secure Network

Configuring SSL/TLS Settings

If your product supports HTTPS, you can configure SSL/TLS to encrypt communications with your

product.

1. Access Web Config and select the Network Security tab.

2. Under SSL/TLS, select Basic.

14

You see a window like this:

3. Select one of the options for the Encryption Strength setting.

4. Select Enable or Disable as the Redirect HTTP to HTTPS setting as necessary.

5. Click Next.

You see a confirmation message.

6. Click OK.

Parent topic: Configuring SSL/TLS Communication

Configuring a Server Certificate for the Product

You can configure a server certificate for your product.

1. Access Web Config and select the Network Security tab.

2. Under SSL/TLS, select Certificate.

15

You see a window like this:

3. Select one of the following options:

• CA-signed Certificate: select Import if you have obtained a CA-signed certificate.

• Self-signed Certificate: select Update if you have not obtained a CA (Certificate Authority)-

signed certificate and want the product to generate a self-signed certificate.

4. Click Next.

You see a confirmation message.

5. Click OK.

Parent topic: Configuring SSL/TLS Communication

Configuring IPsec/IP Filtering

Follow the instructions in these sections to configure IPsec/IP traffic filtering using Web Config.

About IPsec/IP Filtering

Configuring Default IPsec/IP Filtering Policy

Configuring Group IPsec/IP Filtering Policies

IPsec/IP Filtering Policy Settings

IPsec/IP Filtering Configuration Examples

Configuring an IPsec/IP Filtering Certificate

16

Parent topic: Using Your Product on a Secure Network

About IPsec/IP Filtering

You can filter traffic to the product over the network based on IP address, service, and port by

configuring a default policy that applies to every user or group connecting to the product. For control of

individual users or user groups, you can configure group policies.

Note: IPsec is supported only by computers running Windows Vista or later, or Windows Server 2008 or

later.

Parent topic: Configuring IPsec/IP Filtering

Configuring Default IPsec/IP Filtering Policy

You can configure the default policy for IPsec/IP traffic filtering using Web Config.

1. Access Web Config and select the Network Security tab.

2. Under IPsec/IP Filtering, select Basic.

You see a window like this:

3. Select Enable to enable IPsec/IP filtering.

4. Select the filtering options you want to use for the default policy.

5. Click Next.

17

You see a confirmation message.

6. Click OK.

Parent topic: Configuring IPsec/IP Filtering

Configuring Group IPsec/IP Filtering Policies

You can configure group policies for IPsec/IP traffic filtering using Web Config.

1. Access Web Config and select the Network Security tab.

2. Under IPsec/IP Filtering, select Basic.

3. Click a tab number for the policy number you want to configure.

You see a window like this:

4. Select the Enable this Group Policy checkbox.

5. Select the filtering options you want to use for this group policy.

6. Click Next.

You see a confirmation message.

7. Click OK.

8. If you want to configure additional group policies, click the next tab number and repeat the

configuration steps as necessary.

Parent topic: Configuring IPsec/IP Filtering

18

IPsec/IP Filtering Policy Settings

Default Policy Settings

Setting Options/Description

Access Control Permit Access to permit IP packets to pass through

Refuse Access to prevent IP packets from passing

through

IPsec to permit IPsec packes to pass through

Authentication Method Select an authentication method, or select Certificate if

you have imported a CA-signed certificate

IKE Version Select the version of the Internet Key Exchange (IKE)

protocol that matches your network environment

Pre-Shared Key If necessary, enter a pre-shared key between 1 and 127

characters long

Confirm Pre-Shared Key Confirm the pre-shared key you entered

ID If you selected IKEv2 as the IKE Version setting, enter

the necessary ID information

Encapsulation If you selected IPsec as the Access Control option,

select one of these encapsulation modes:

Transport Mode: if you are using the product on the

same LAN; IP packets of layer 4 or later are encrypted

Tunnel Mode: if you are using the product on an Internet-

capable network, such as IPsec-VPN; the header and

data of IP packets are encrypted

Remote Gateway(Tunnel Mode) If you selected Tunnel Mode as the Encapsulation

option, enter a gateway address between 1 and 39

characters long

19

Setting Options/Description

Security Protocol If you selected IPsec as the Access Control option,

select one of these security protocols:

ESP: to ensure the integrity of authentication and data,

and encrypt data

AH: to ensure the integrity of authentication and data; if

data encryption is prohibited, you can use IPsec

Algorithm Settings Select the encryption algorithm settings for the security

protocol you selected

Group Policy Settings

Setting Options/Description

Access Control Permit Access to permit IP packets to pass

through

Refuse Access to prevent IP packets from

passing through

IPsec to permit IPsec packes to pass through

Local Address(Printer) Select an IPv4 or IPv6 address that matches your

network environment; if the IP address is assigned

automatically, select Use auto-obtained IPv4

address

Remote Address(Host) Enter the device's IP address (between 0 and 43

characters long) to control access, or leave blank

to control all addresses; if the IP address is

assigned automatically, such as by DHCP, the

connection may be unavailable, so configure a

static address instead

Method of Choosing Port Select the method you want to used for specifiying

ports

Service Name If you selected Service Name as the Method of

Choosing Port option, select a service name

option here; see the next table for more

information

20

Setting Options/Description

Transport Protocol If you selected Port Number as the Method of

Choosing Port option, select one of these

encapsulation modes:

Any Protocol

TCP

UDP

ICMPv4

See the Group Policy Guidelines table for more

information

Local Port If you selected Port Number as the Method of

Choosing Port option, and TCP or UDP for the

Transport Protocol option, enter the port

numbers that control receiving packets (up to 10

ports), separated by commas, for example

25,80,143,5220; leave this setting blank to control

all ports; see the next table for more information

Remote Port If you selected Port Number as the Method of

Choosing Port option, and TCP or UDP for the

Transport Protocol option, enter the port

numbers that control sending packets (up to 10

ports), separated by commas, for example

25,80,143,5220; leave this setting blank to control

all ports; see the next table for more information

IKE Version Select IKEv1 or IKEv2 depending on the device

that the product is connected to

Authentication Method If you selected IPsec as the Access Control

option, select an authentication method here

Pre-Shared Key If you selected Pre-Shared Key as the

Authentication Method option, enter a pre-

shared key between 1 and 127 characters long

here and in the Confirm Pre-Shared Key field

Page is loading ...

Epson WorkForce Enterprise WF-C17590, WorkForce Enterprise WF-C20590, WorkForce Enterprise WF-M20590, WorkForce Enterprise WF-M20590F Operating instructions

Related papers

Other documents